833e332dc7a23004cf9da9714c7d4522571617c174f654957c173ebcc74ede67

Analysis

max time kernel
47s
max time network
157s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
15/07/2024, 02:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

833e332dc7a23004cf9da9714c7d4522571617c174f654957c173ebcc74ede67.apk
Size

3.9MB
MD5

46f65e8d735ec88344f0e3fd64d0ecc1
SHA1

7f928d391000f0c0f32af4abbdd571ecdd7d0025
SHA256

833e332dc7a23004cf9da9714c7d4522571617c174f654957c173ebcc74ede67
SHA512

acea2a07a838bbe2aabb4445336773d12d972269a04c8df9d7867a54024e7010e390dc34538a539a89dcfd4cb6ade1464798f9593f7bd1ae4c4a3c9334ce50ba
SSDEEP

98304:0ojAXbAmWbmsrT6Sr7Cs3wWXkYQYatKFdtho/KrQZB/y:7MbgTHr7DwWN+0tYB6

Score

6^/10

evasion

Malware Config

Signatures

Checks the application is allowed to request package installs through the package installer 1 TTPs 1 IoCs

Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).

evasion

Code Signing Policy Modification

T1632.001

description	ioc	Process
Framework service call	android.content.pm.IPackageManager.canRequestPackageInstalls	com.mtf.download

com.mtf.download
1⤵
- Checks the application is allowed to request package installs through the package installer
PID:5069

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

T1632

Code Signing Policy Modification

T1632.001

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.mtf.download/files/profileInstalled

Filesize
24B

MD5
7daff7a70f19a5eda232817aeb490aea

SHA1
50073847a85ca793e2dfa751dbbfd6fbd8a2a99f

SHA256
6f904b7a16f0924fb12ae23b67744a10ef9aa39358e5e98146a2d6087b8e90e0

SHA512
090b62ab2822d253b93dc55ad6d4fd246fee85fe9907afebe13a2306eb1d8263b1f968527dc2195bf56693d99109afbf22bf45bba36d55bec572debcb1b3aefe

Download Submit
/data/data/com.mtf.download/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

Filesize
8B

MD5
264eabe20f9789e1a22caa477c19f4c2

SHA1
7005133d29344123a3ce449f21adcc423b4e62a2

SHA256
06102cd0b02228711adb0ab43b2cfac17aa0042e68cf02a050e9eec196e8c9f9

SHA512
bbca60c273f74f20bafb30194b558ac90907919f10bb0746c0a4fdc1d9a1d8380e431b191775fb8ea078805c3b376d5c433b7a13dd38cff31a1b2d154e357cd6

Download Submit
/data/misc/profiles/cur/0/com.mtf.download/primary.prof

Filesize
2KB

MD5
86c631e67c758d92e09cb4e8ed40d5f2

SHA1
eae2c33d75184b5ad2275bf440353be737648d77

SHA256
7072a584d031796d30a26500abf555e63689e6fa0b534774dbfadedb14c2e0db

SHA512
2d68def5f6b3b1ed87951a1870bbfa6d8acbda102d8f521d4afa21e46bfed49141868c6c26b8fcbca94efac4c0f1df2b14afbea9de2e04d8e2d7708f8d8430ef

Download Submit
/data/misc/profiles/cur/0/com.mtf.download/primary.prof

Filesize
5KB

MD5
ce7dee6e9a95e06767d616567beeb6dd

SHA1
12b873d935139ee6b41874e37bb9b5f1c267923d

SHA256
85cf1108765cbdf0c9c7d98227f9085c567ff87e79e0199ad50d32365d2de205

SHA512
484ddcbdf0859e6ab52f7fb60835ea779827775030ed0e8d84ab3b23a9ff590db4aa25a740dd206a222a1f99c033ccd6a448a36111e40ae2e1e1f7127c66eb24

Download Submit